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SECURE SERVER-BASED IDENTIFICATION FOR 
SIMPLIFIED ONLINE TRANSACTION PROCESSING 
WITH PALMTOP COMPUTER 



FIELD OF THE INVENTION 

10 The present invention relates to the field of transaction processing using a 

palmtop computer. 

BACKGROUND 

15 

As the components required to build a computer system have reduced in 
size, new categories of computer systems have emerged. One of the new 
categories of computer systems is the "palmtop" computer system. A palmtop 
computer system is a computer that is small enough to be held in the hand of a 
20 user and can be "palm-sized." Most palmtop computer systems are used to 
implement various Personal Information Management (PIM) applications such 
as an address book, a daily organizer and electronic notepads, to name a few. 

Due to the small size of such palmtop computers, they are convenient to 
25 carry in a pocket or purse. Unfortunately, they are also easily lost or stolen due 
to their small size. As such, it is generally undesirable to store sensitive 
information such as credit or debit card numbers in such a device. With the 
latest generation of palmtop computers, which include an internal RF transceiver, 
a user is able carry out many types of online transactions from almost anywhere. 
30 Such transactions typically require the user to enter substantial amounts of 
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information such as name, address and credit card number. Unfortunately, the 
small size makes even the best data entry schemes somewhat tedious and error 
prone. Therefore, it would be useful to provide a way to utilize storage outside 
the palmtop computer to store sensitive information, while still permitting quick 
5 access to that information to facilitate transaction processing. 

SUMMARY OF THE INVENTION 

10 Accordingly, what is needed is a method and apparatus for secure 

transaction processing which can be utilized with a palmtop computer, but which 
utilizes storage facilities of a remote server. A method and system are described 
for providing such method and apparatus. 

15 In certain embodiments of the invention, a secure simplified transaction 

processing method and apparatus for a palmtop computer is disclosed. 
Sensitive personal information is stored in a secure personal information 
database. A site map database contains information which maps the fields of the 
personal information database to frames of a Web page. On request of a 

20 palmtop computer, a robot program correlates the personal information fields 
with the frames of the Web page and sends the personal information back to the 
palmtop computer. The palmtop computer uses this information to automatically 
populate the frames of a Web clipping representing a Web page. This has.the 
advantage that the user does not have to manually fill in the frames of the web 

25 clipping while providing security for sensitive information. 

In accordance with a method of certain embodiments of the invention, a 
method for providing transaction processing in a palmtop computer, is 
implemented by: providing a file server; providing a personal information 
30 database, residing on the file server, containing personal information data 
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relating to a user of the palmtop computer; providing a site map database, 
residing on the file server, the site map database containing data which maps 
fields of the personal information database to frames of known Web clippings; 
receiving a request from a palmtop computer to populate frames of a selected 
5 Web clipping; retrieving personal information data from the personal information 
database for fields mapped to the frame in, the selected Web clipping in the site 
map database; and transmitting the retrieved personal information to the palmtop 
computer. 

10 A method according to another embodiment of the present invention 

provides simplified transaction processing in a palmtop computer by: sending a 
request from the palmtop computer to a file server to obtain information to 
populate a plurality of frames of a selected Web clipping; receiving a 
transmission from the file server containing personal information data extracted 

15 from a personal information database, the personal information database 

residing on the file server and containing personal information data relating to a 
user of the palmtop computer; wherein, the personal information being retrieved 
from fields in the personal information database have been mapped to frames in 
the selected Web clipping in the site map database. 

20 

A palmtop computer, in accordance with certain embodiments of the 
present invention has a radio frequency transmitter for sending a request from 
the palmtop computer to a file server to obtain information to populate a plurality 
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of frames of a selected Web clipping. A radio receiver receives a transmission 
from the file server containing personal information data extracted from a 
personal information database, the personal information database residing on the 
file server, and containing personal information data relating to a user of the 
5 palmtop computer. A processor populates the frames of the selected Web 
clipping with the personal information data received. 



BRIEF DESCRIPTION OF THE DRAWINGS 

10 

Figure 1 is system illustration of a palmtop computer system connected to 
other computer systems and the Internet via a cradle device. 

Figure 2A is a top side perspective view of a palmtop computer system 
15 that can be used in the present invention. 

Figure 2B is a bottom side perspective view of the palmtop computer 
system of Figure 2A. 

20 Figure 3 is an exploded view of the components of the palmtop computer 

system of Figure 2A. . . - 

Figure 4 is a perspective view of a cradle device for connecting the 
palmtop computer system to other systems via a communication interface. 

25 

Figure 5 is a logical block diagram of the palmtop computer system in 
accordance with an embodiment of the present invention. 
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Figure 6 is a block diagram of the major components of a wireless network 
in accordance with an embodiment of the present invention. 

Figure 7 is a diagram illustrating the information flow in an embodiment of 
5 the present invention. 

Figure 8 is a flow chart describing operation of the present invention in 
certain embodiments. 

10 

DETAILED DESCRIPTION OF THE INVENTION 

In the following detailed description of the present invention, a secure 
transaction processing arrangement for use with a palmtop computer, numerous 

15 specific details are set forth in order to provide a thorough understanding of the 
present invention. However, it will be recognized by one skilled in the art that the 
present invention may be practiced without these specific details or with 
equivalents thereof. In other instances, well known methods, procedures, 
components, and circuits have not been described in detail as not to 

20 unnecessarily obscure aspects of the present invention. 

NOTATION AND NOMENCLATURE 

Some portions of the detailed descriptions that follow are presented in 
25 terms of procedures, steps, logic blocks, processing, and other symbolic 

representations of operations on data bits that can be performed in computer 
memory. These descriptions and representations are the means used by those 
skilled in the data processing arts to most effectively convey the substance of 
their work to others skilled in the art. A procedure, computer executed step, logic 
30 block, process, etc., is here, and generally, conceived to be a self-consistent 
sequence of steps or instructions leading to a desired result. The steps are 
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those requiring physical manipulations of physical quantities. Usually, though not 
necessarily, these quantities take the form of electrical or magnetic signals 
capable of being stored, transferred, combined, compared, and otherwise 
manipulated in a computer system. It has proven convenient at times, principally 
5 for reasons of common usage, to refer to these signals as bits, values, elements, 
symbols, characters, terms, numbers, or the like. 

It should be borne in mind, however, that all of these and similar terms are 
to be associated with the appropriate physical quantities and are merely 
1 0 convenient labels applied to these quantities. Unless specifically stated 
otherwise, as apparent from the following discussions, it is appreciated that 
throughout the present invention, discussions utilizing terms such as 
"processing" or "computing" or "translating" or "calculating" or "determining" or 
''scrolling" or "displaying" or "recognizing" or the like, refer to the action and 
1 5 processes of a computer system, or similar electronic computing device, that 
manipulates and transforms data represented as physical (electronic) quantities 
within the computer system's registers and memories into other data similarly 
represented as physical quantities within the computer system memories or 
registers or other such information storage, transmission or display devices. 

20 

For clarity, the term "field" as used herein with reference to a field in a 
database is intended to have the conventionally accepted meaning in the 
database arts. The term "frame", as used herein, is intended to embrace., 
database fields as represented by data entry boxes in a Web page form or a 
25 Web clipping form. 
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SECURE SERVER-BASED IDENTIFICATION FOR SIMPLIFIED ONLINE 
TRANSACTION PROCESSING WITH PALMTOP COMPUTER IN 
ACCORDANCE WITH THE PRESENT INVENTION 

5 While this invention is susceptible of embodiment in many different forms, 

there is shown in the drawings and will herein be described in detail, specific 
embodiments, with the understanding that the present disclosure is to be 
considered as an example of the principles of the invention and not intended to 
limit the invention to the specific embodiments shown and described. In the 

1 0 description below, like reference numerals are used to describe the same, similar 
or corresponding parts in the several views of the drawing. 

Figure 1 illustrates a system 50 that can be used in conjunction with the 

secure transaction system and method of the present invention. System 50 
1 5 comprises a host computer system 56 which can either be a desktop unit as 

shown, or, alternatively, can be a laptop or notebook computer system 58. 

Optionally, one or more host computer systems can be used within system 50. 

Host computer systems 58 and 56 are shown connected to a communication bus 

54, which in one embodiment can be a serial communication bus, but could be of 
20 any of a number of well known designs, e.g., a parallel bus, Ethernet Local Area 

Network (LAN), etc. Optionally, bus 54 can provide communication with the 

Internet 52 using a number of well known protocols. 

Bus 54 is also coupled to a cradle 60 for receiving and initiating 
25 communication with a palmtop ("palm-sized") portable computer system 1 00 of 
the present invention. Cradle 60 provides an electrical and mechanical 
communication interface between bus 54 (and anything coupled to bus 54) and 
the computer system 1 00 for two-way communications. Computer system 1 00 
may contain a wireless infrared communication mechanism 64 for sending and 
30 receiving information to and from other devices. 
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15 



20 



Figure 2A is a perspective illustration of the top face 100a of one 
embodiment of the palmtop computer system of the present invention. The top 
face 1 00a contains a display screen 1 05 surrounded by a bezel or cover. A 
removable stylus 80 is also shown. The display screen 105 is a touch screen 
able to register contact between the screen and the tip of the stylus 80. The 
stylus 80 can be of any material to make contact with the screen 105. The top 
face 100a also contains one or more dedicated and/or programmable buttons 75 
for selecting information and causing the computer system to implement 
functions. The on/off button 95 is also shown. 

Figure 2A also illustrates a handwriting recognition pad or "digitizer; . 
containing two regions 106a and 106b. Region 106a is for the drawing of 
alphabetic characters therein for automatic recognition and region 106b is for the 
drawing of numeric characters therein for automatic recognition. 

The stylus 80 is used for stroking a character within one of the 
regions106a and 106b. The stroke information is then fed to an internal 
processor for automatic character recognition. Once characters are recognized, 
they are typically displayed on the screen 105 for verification and/or modification. 



Figure 2B illustrates the bottom side 100b of one embodiment of the 
palmtop computer system of the present invention. An extendible antenna 85 is 
shown and also a battery storage compartment door 90 is shown. A ... 
communication interface 108 is also shown. In one embodiment of the present 
25 invention, the serial communication interface 1 08 is a serial communication port, 
but could also alternatively be of any of a number of well known communication 
standards and protocols, e.g., parallel, SCSI, Firewire (IEEE 1394), Ethernet, etc. 

Figure 3 is an exploded view of the palmtop computer system 100 in 
30 accordance with one implementation. System 1 00 contains a front cover 21 0 
having an outline of region 106 and holes 75a for receiving buttons 75b. Aflat 
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panel display 105 (both liquid crystal display and touch screen) fits into front 
cover 210. Any of a number of display technologies can be used, e.g., LCD, 
FED, plasma, etc., for the flat panel display 105. A battery 215 provides 
electrical power. A contrast adjustment (potentiometer) 220 is also shown. 

5 

On/off button 95 is shown along with an infrared emitter and detector 
device 64. A flex circuit 230 is shown along with a PC board 225 containing 
electronics and logic (e.g., memory, communication bus, processor, etc.) for 
implementing computer system functionality. The digitizer pad is also included in 
1 0 PC board 225. A midframe 235 is shown along with stylus 80. Position 
adjustable antenna 85 is shown. Antenna 85 is connected to an RF 
transmitter/receiver device 240 (transceiver) which is provides communications 
with wireless data network. 

1 5 A radio receiver/transmitter device 240 is also shown between the 

midframe and the rear cover 245 of Figure 3. The receiver/transmitter device 
240 is coupled to the antenna 85 and also coupled to communicate with the PC 
board 225. In one implementation, the Mobitex wireless communication system 
is used to provide two way communication between system 100 and other 

20 networked computers and/or the Internet via a proxy server. 

Figure 4 is a perspective illustration of one embodiment of the cradle 60 
for receiving the palmtop computer system 100. Cradle 60 contains a 
mechanical and electrical interface 260 for interfacing with serial" connection 108 
25 (Figure 2B) of computer system 1 00 when system 1 00 is slid into the cradle 60 in 
an upright position. Once inserted, button 270 can be pressed to initiate two way 
communication between system 100 and other computer systems coupled to 
serial communication 265. 

30 Figure 5 illustrates circuitry of computer system 1 00, some of which can 

be implemented on PC board 225. Computer system 100 includes an 
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address/data bus 110 for communicating information, a central processor 101 
coupled with the bus for processing information and instructions, a volatile 
memory 102 (e.g., random access memory RAM) coupled with the bus 100 for 
storing information and instructions for the central processor 101 and a non- 
volatile memory 103 (e.g., read only memory ROM) coupled with the bus 110 for 
storing static information and instructions for the processor 101 . Computer 
system 100 also includes an optional data storage device 104 (e.g., memory 
stick) coupled with the "bus 1 1 0 for storing information and instructions. Device 
104 can be removable. As described above, system 100 also contains a display 
device 105 coupled to the bus 1 10 for displaying information to the computer 
user. PC board 225 can contain the processor 101, the bus 110, the ROM .103 
and the RAM 102. 

Also included in computer system 100 of Figure 5 is an optional 
alphanumeric input device 106 which in one implementation is a handwriting 
recognition pad ("digitizer") having regions 106a and 106b (Figure 2A), for 
instance. Device 106 can communicate information and command selections to 
the central processor 101. System 100 also includes an optional cursor control 
or directing device 107 coupled to the bus for communicating user input 
information and command selections to the central processor 101. In one 
implementation, device 107 is a touch screen device incorporated with screen 
105. Device 107 is capable of registering a position on the screen 105 where th< 
stylus makes contact. The display device 105 utilized with the computer system 
100 may be a liquid crystal device, cathode ray tube (CRT), field 
emission device (FED, also called flat panel CRT) or other display device 
suitable for creating graphic images and alphanumeric characters recognizable 
to the user. In the preferred embodiment, display 105 is a flat panel display. 

Signal communication device (I/O device) 108, also coupled to bus 110, 
can be a serial port for communicating with the cradle 60. Device 108 can also 
include an infrared communication port. As shown, the device 108 is coupled tc 
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the radio frequency transceiver 240 and antenna 85 to provide wireless 
communication. 

Referring now to Fig. 6, the Palmtop Computer 100 is shown as it interacts 
5 with a wireless data network. In this figure, Palmtop Computer 1 00 

communicates via its antenna 85 with one of a plurality of base stations 300. 
Each of the base stations 300 is in turn connected to a wireless data network 
such as those used for cellular telecommunications. The wireless data network 
310 is in turn coupled to a data center 320. In addition, data center 300 is 
10 connected to the Internet 52 which places all of the capabilities of the Internet 
and the World Wide Web at the disposal of the data center 320. 

The data center 320 can provide a number of services to the Palmtop 
Computer 100 including authentication services provided by authentication 
1 5 server 322 which authenticates the identity of a user utilizing Palmtop Computer 
100. Additional authentication services and encryption services may also be 
provided by wireless data network 310, depending upon the application. In 
addition, data center 320 provides a service called "Web clipping" via a Web 
clipping proxy server 324. 

20 

"Web clipping" is a process by which the Palmtop Computer 1 00 can 
effectively provide Internet services to the user within its environment of limited 
communication bandwidth, limited memory and limited processing capabilities. 
The concept of Web clipping is based on a principal of minimizing the amount of 

25 information that is communicated to and from Palmtop Computer 1 00. That is, 
the less data transferred the more efficient the communication system. In Web 
clipping, all user interaction is based on a simple query and response rather than 
on a system of hyperlinks as on the World Wide Web. The query portion is 
stored on Palmtop Computer 100 and is active when the user enters data into a 

30 request form. For example, if the user wishes to obtain a stock quote, the stock 
symbol may be entered into a request form without the user going on-line. The 
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query is then submitted to the data center 320 through the wireless data network 
310 in the form of a very small message (typically less than 50 bytes). The data 
center 320 serves as an interface to the Internet 52 which pulls the desired 
information from the Internet and returns a response via wireless data network 
5 310 to the Palmtop Computer 100 in a response which is typically less than 500 
bytes (compressed). As a result, the user is able to obtain the information 
desired from a particular Web page without having to actually browse the Internet 
and display Web pages on the limited resolution display of the Palmtop 
Computer 100. Web clipping is described in greater detail in U.S. patent 
10 application serial number 09/087,515 Filed May 29,1998 entitled "Method and 
Apparatus for Communicating Information Over Low Bandwidth Communications 
Network", naming Hawkins et al. This application is hereby incorporated by 
reference. 

1 5 This approach has the benefits of providing near instant access to the 

Internet while simultaneously providing low cost of service by controlling the 
airtime usage. This in turn results in long battery life since transmissions from 
Palmtop Computer 100 may be a substantial drain on batteries. 

20 The Web clipping proxy server 324 is responsible for converting standard 

Internet protocols and content from a Web page into a form that is tuned for 
transmission across a wireless network and for display on a very thin client 
device such as Palmtop Computer 100. The Web clipping proxy server 324 uses 
standard Internet and security protocols (TCP, HTTP and SSL) to HTML servers 

25 to insure compatibility. However, on the wireless side, it adjusts everything to 
support extremely low bandwidth and latency. Moreover, the Web clipping proxy 
server 324 compresses the data from the Internet to insure maximum 
transmission efficiency in the wireless environment. Data center 320 having Web 
clipping proxy server 324 is currently implemented for the commercially available 

30 Palm VII wireless palmtop computer system as a service called Palm.net™ 
operated by Palm Computing, Inc. 
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ln accordance with the present intention, data center 320 also includes a 
software robot 330, which is able to receive and send HTML code. This robot 
330 interfaces with a site map database 340 and a personal information 
database 350. Site map database 340 and personal information database 350 
both also reside within data center 320. While not explicitly illustrated in Fig. 6, 
data center 320 is preferably a "secure" data center in that it is protected by fire 
wall and encryption technologies to assure the security of the information stored 
in the data center. For purposes of this document, the term "secure" is intended 
to embrace any security measures such as fire walls, encryption and 
authentication technologies as well as physical barriers (locked doors, etc.) to 
provide for security of the server and/or the data center. 

In accordance with the present invention, the personal information 
database 350 is stored within a secure server in secure data center 320 so that 
the user of Palmtop Computer 100 can reliably store sensitive information in the 
personal information database 350. In general, it might be undesirable to store 
such confidential information within Palmtop Computer 100 due to the ease of 
loss of small hand held devices, or the possibility of theft of the device or the 
information stored therein. Accordingly, it is advantageous to provide a 
convenient way for the user to obtain access to this information in electronic 
form, for example for completing information used in on-line transactions or for 
otherwise providing responses without having to manually enter data on the 
Palmtop Computer 100, but in a manner which assures high levels of security. 

Table 1 below shows a simplified example of the type of information which 
might be stored in a personal information database 350. Because of the nature 
of the use of this database, the database 350 may contain a very substantial 
amount of information which will be mapped to particular Web pages as will be 
described later. However, for purposes of illustration, only a brief amount of 
information is shown in Table 1 as illustrative of that which would appear in the 
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personal information database. In this case, the database includes fields such as 
"First Name", Last Name", "Email Address" and "Credit Card Number". In 
addition, variations of the data may appear in the personal information database. 
For example, it may also be advantageous to have a field which is the 

5 combination of the "First + Last Name" as shown in Table 1 . Other example 
types of information which might be stored in the personal information database 
include age, shipping address, post office address, city, state, country, telephone 
number, fax number/marital status, sex, citizenship/political party, etc. An 
identification field ("Customer ID") is provided to uniquely identify each user 

1 0 associated with each Palmtop computer with personal information stored in the 
personal information database. 



PERSONAL INFORM 


ATION DATABASE 


FIELD 


DATA 


Customer ID 


ASDFGHJKL-987654321 0 


First Name 


William 


Last Name 


Smith 


First + Last Name 


William Smith 


Email Address 


ws® 123.net 














Credit Card Number 


123456789 



15 TABLE 1 

Once the information is stored by the user in the personal information 
database 350, this information can be advantageously utilized to simplify the 
filling out of data forms and the like which a user often encounters in carrying out 
20 on-line transactions on the Internet. By way of example, and not by way of 

limitation, consider the fictitious example shown in Fig. 7. In this example, a Web 
clipping for a fictitious Web site shown as xyznews.com/orderfrm/ is shown. This 
Web clipping 370 may represent, for example, a Web clipping which permits a 
user to subscribe to a news service called xyznews. In order to complete the 
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subscription, the user must submit certain personal information to the Web site, 
which includes identifying information as well as payment information such as a 
credit card number. Four such pieces of information are shown in Fig. 7 for Web 
clipping 370 but of course this is not to be limiting since this is simply illustrative. 

5 

When a user decides that he or she wishes to subscribe to this service, 
the procedure would normally be to enter data into each of the frames 370A, 
370B, 370C, 370D. The user would then submit this information and be 
registered to the subscription desired. In accordance with the present invention, 

1 0 the tedium associated with entry of this data is minimized by virtue of the user 
taking a control action to automate the process. The control action may * 
implemented, for example, by a pull-down menu or a specified sequence of 
strokes on the input device of the Palmtop Computer 100. In any event, a 
transmission occurs between the Palmtop Computer 100 and the data center 320 

1 5 requesting that the data center 320 automatically populate the frames of the Web 
clipping. 

When the data center 320 receives this request, robot 320 retrieves 
personal information from personal information database 350 in order to 
20 accomplish this task. Robot 320 also retrieves information from site map 

database 340 to determine exactly how to populate frames 370A through 370D 
of Web clipping 370. 

In order to see how robot 330 accomplishes this task, it is instructive to 
25 consider sample HTML code which might be used to create Web clipping 370 as 
well as to view an example of the Site map database 340. Referring to Table 2, 
a sample of the HTML script which might be used to represent the Web clipping 
370 as originally written for an Internet Web page is shown. 
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<HTML> 



<FORMMETHOD=postACTION=7cgi-bin/custdatapr> 

<BR>First Name <INPUT TYPE="text" NAME-'first SIZE="15" MAXLENGHT= 25 
<I5>2S Name <INPUT TYPE=»texf NAME-'last" SIZE=»15" ^™G^ 
<BR>Email Address <INPUT TYPE="text" NAME= email S1ZE="15" MAXLENGTH- 35 

<BR>Credit Card # <INPUT TYPE="text" NAME="cardnum" SIZE="15" MAXLENGHT="15" 
</FORM> 

</HTML> 



TABLE 2 



From this code, it can be determined that the information submitted upon 
completion of the frames of the Web clipping will ultimately be stored in a file 
entitled custdata.pl. It can also be determined that frame 370A representing the 
users first name uses the variable name "first". Similarly, the last name, E-mail 
address and credit card number frames 370B, 370C and 370D use variable 
names "last", "email" and "cardnum", respectively. 

Referring now to Table 3, an illustration of the Site map database is 
shown. Site map database 340 is a database, which maps the fields of the 
personal information database to data entry frames in various Web clippings 
(representing Web sites). In the simplified example shown in Table 3, for 
example, two data mappings are illustrated. For xyznews, the personal 
information database field named "First Name" is mapped to a field named "first" 
in the site map database. Similarly, personal information field "Last Name" is 
mapped to "last" in the site map database, "Email Address" is mapped to "email" 
and "Credit Card Number" is mapped to "cardnum". 
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Other types of information may also be mapped in the site map database 
for each of numerous Web clippings. For example, the second illustration for a 
type of survey data may request age and birth date information from the personal 
information database which is mapped to fields called "age" and "dateofbirth" in 

5 the survey data. Thus, when Palmtop Computer 100 submits a request to 

populate the frames of a Web clipping such as 370, robot 330 correlates the data 
fields of the Web clipping 370 with data fields in the personal information 
database and returns the data to populate fields 370A, 370B, 370C through 370D 
in frame 370. The user may then submit the data by tapping the submit icon 372 

1 0 for example to complete the on-line transaction. 



SITE MAP DATABASE 


PIDB Field 


XYZNEWS.COM/ORDERFRM/ 


XXXX.COM/SURVEYDATA/ 


First Name 


first 




Last Name 


last 




First + Last Name 




surveyed name 








Email Address 


email 


emailaddress 








Age 




age 


Birth Date 




dateofbirth 








Credit Card Number 


card n urn 





TABLE 3 

15 . - 

Those skilled in the art will appreciate that authentication functions and 
encryption functions should also be incorporated in the various transmissions 
associated with the present invention in order to maintain the security of personal 
information. 

20 

Referring now to Fig. 8, the process previously described is summarized 
in the form of a flow chart. At 400 the Palmtop Computer 100 presents a Web 
clippping containing frames which are to be filled to complete a transaction. At 
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404, the user can instruct the Palmtop Computer 100 to implement a process of 
populating the frames. If no such instruction is given or if the user takes other 
action the process stops at 408. If, at 404, the Palmtop Computer 1 00 is 
instructed to populate the frames, control passes to 412 where the Palmtop 
Computer 100 transmits a request to the data center 320 to assist in populating 
the frames. In general, such a request may include a user identification (e.g. 
user ID and password) used for authentication in the authentication server 322 
as well as an Internet address for the page to be populated. If the data center's 
authentication server fails to authenticate the user at 416, the process again 
stops at 408. If the user is authenticated at 416, robot program 330 identifies the 
Web clipping frames from the site map database and pulls personal information 
from the personal information database which is needed to populate those Web 
clipping frames at 420. Data center 320 then transmits the personal information 
back to the Palmtop Computer 100 at 424 in encrypted or enciphered form. 

At 430, Palmtop Computer 100 receives the transmission and populates 
the Web clipping frames with the personal information transmitted from the data 
center 320. At 434, the user has the option of completing the transaction or 
aborting. If the user chooses to abort control passes again to 408 which 
terminates the process. If, however, the user chooses to complete the 
transaction at 434, Palmtop Computer 100 transmits the populated frame to 
complete the transaction at 438. Again, since the transmission includes sensitive 
personal information, the transmission should be enciphered or encrypted to 
protect the security of the information. Once this transmission has occurred, the 
data center sends the information along to the Internet Web page to complete the 
transaction. 

Those skilled in the art will recognize that various protocols can be used to 
utilized to effect the above transmissions. Moreover, there are many possible 
implementation details which have not been described herein but would be within 
the skill of those of ordinary skill in the art. For example, while the invention has 
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been described in terms of transmitting a Web clipping or Web page address 
from the Palmtop Computer 100 to the data center, the Palmtop Computer 100 
could also simply transmit the names of each of the frames to be populated or 
the variables which are required. The data center, could track the activity of the 
Palmtop Computer 100 to know which Web clipping and Web page this data 
correlates to. Also, in a slight variation of the present invention, when the user 
requests that the data center provide information to populate a Web page, the 
data center may simply populate the page and forward it to the appropriate 
address on the Internet without further interaction of the Palmtop Computer 100. 
Additionally, although the preferred embodiment is used to populate a Web 
clipping as described herein, this invention can be used to automatically populate 
any form such as an HTML or XML form without departing from the present 
invention. These and other variations will occur to those of ordinary skill in the 
art upon consideration of the proceeding discussion. 

. Those skilled in the art will recognize that the present invention has been 
described in terms of exemplary embodiments based upon use of a programmed 
processor. However, the invention should not be so limited, since the present 
invention could be implemented using hardware component equivalents such as 
special purpose hardware and/or dedicated processors which are equivalents to 
the invention as described and claimed. Similarly, general purpose computers, 
microprocessor based computers, micro-controllers, optical computers, analog 
computers, dedicated processors and/or dedicated hard wired logic may be used 
to construct alternative equivalent embodiments of the present invention. 

While the invention has been described in conjunction with specific 
embodiments, it is evident that many alternatives, modifications, permutations 
and variations will become apparent to those skilled in the art in light of the 
foregoing description. Accordingly, it is intended that the present invention 
embrace all such alternatives, modifications and variations as fall within the 
scope of the appended claims. 
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CLAIMS 

What is claimed is: 

5 

1 . A method for providing transaction processing in a palmtop computer, 
comprising: 

providing a file server; 

^providing a personal information database, residing on the file server, 
10 containing personal information data relating to a user of the palmtop computer; 

providing a site map database, residing on the file server, the site map 
database containing data which maps fields of the personal information database 
to frames of known Web clippings; 

receiving a request from a palmtop computer to populate frames of a 
15 selected Web clipping; 

retrieving personal information data from the personal information 
database for fields mapped to the frame in the selected Web clipping in the site 
map database; and 

transmitting the retrieved personal information to the palmtop computer. 

20 

2. The method of claim 1 , further comprising populating the frames of the 
selected Web clipping in the palmtop computer. 
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3. The method of claim 2, further comprising transmitting the populated 
frame from the palmtop computer to a Web site. 

4. The method of claim 1 , wherein providing the site map includes scraping a 
5 Web site to harvest frames to be populated. 

5. The method of claim 1 , wherein the personal information database is 
manually populated with data by the user. 

1 0 6. The method of claim 1 , wherein the server comprises a secure server. 

7. The method of claim 1 , wherein the Web clipping correlates to a Web 
page on the World Wide Web. 

1 5 8. The method of claim 1 , further comprising mapping the palmtop computer 
to a user in the personal information database. 

9. The method of claim 1 , wherein the receiving and transmitting are carried 
out over a wireless data communication network. 

20 
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1 0. A method for providing simplified transaction processing in a palmtop 
computer, comprising: 

sending a request from the palmtop computer to a file server to obtain 
information to populate a plurality of frames of a selected Web clipping; 

receiving a transmission from the file server containing personal 
information data extracted from a personal information database, the personal 
information database residing on the file server, and containing personal 
information data relating to a user of the palmtop computer; 

wherein, the personal information being retrieved from fields in the 
personal information database which have been mapped to frames in the 
selected Web clipping in the site map database. 

11. The method of claim 1 0, further comprising transmitting the retrieved 
personal information to the palmtop computer. 

12. The method of claim 1 1 , further comprising populating the frames of the 
selected Web clipping in the palmtop computer. 

13. The method of claim 12, further comprising transmitting the populated 
frames of the selected Web clipping to a Web site for transaction processing. 
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14. The method of claim 1 3, wherein the populated frames of the selected 
Web clipping are transferred to the Web site through a data center which 
translates between Web clippings and Web pages. 

5 1 5. The method of claim 1 0, wherein the sending and receiving are carried out 
over a wireless data communication network. 

16. A palmtop computer, comprising: 

■-a radio frequency transmitter for sending a request from the palmtop 
1 0 computer to a file server to obtain information to populate a plurality of frames of 
a selected Web clipping; 

a radio receiver for receiving a transmission from the file server containing 
personal information data extracted from a personal information database, the 
personal information database residing on the file server, and containing 
1 5 personal information data relating to a user of the palmtop computer; and 

a processor which populates the frames of the selected Web clipping with 
the personal information data received. 

17. The palmtop computer of claim 16, wherein the request comprises a label 
20 for a Web clipping containing the frames to be populated. 

1 8. The palmtop computer of claim 1 6, wherein the file server comprises a 
secure file server. 
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19. The palmtop computer of claim 16, further comprising means for 
transmitting the populated Web clipping to a Web site. 

20. The palmtop computer of claim 1 9, wherein the populated Web clipping is 
conveyed to the Web site through a data center containing the secure file server. 
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SECURE SERVER-BASED IDENTIFICATION FOR SIMPLIFIED ONLINE 
TRANSACTION PROCESSING WITH PALMTOP COMPUTER 

ABSTRACT OF THE INVENTION 

5 

A secure simplified transaction processing method and apparatus for a 
palmtop computer. Sensitive personal information is stored in a secure personal 
information database. A site map database contains information which maps the 
fields of the personal information database to frames of a Web page. On request 

10 of a palmtop computer, a robot program correlates the personal information fields 
with the frames of the Web page and sends the personal information backtcrthe 
palmtop computer. The palmtop computer uses this information to automatically 
populate the frames of a Web clipping representing a Web page. This has the 
advantage that the user does not have to manually fill in the frames of the web 

15 clipping while providing security for sensitive information. 
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